PT-2025-25174 · K7 · K7 Security Anti-Malware Suite

Carlos Garrido · Published 2025-06-10 · Updated 2025-09-17 · CVE-2025-1055

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions K7 Security Anti-Malware suite (affected versions not specified)

Description A flaw in the K7RKScan.sys driver allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges. This issue stems from missing access control in the driver's IOCTL handler, enabling unprivileged users to perform privileged actions in kernel space. Successful exploitation can lead to denial of service by disrupting critical services or privileged applications.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

LPE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-1055

Affected Products

K7 Security Anti-Malware Suite

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-1055 · Security Note
• https://pentraze.com · Note
• https://pentraze.com/vulnerability-reports · Note
• https://reddit.com/r/CVEWatch/comments/1nhhri0/top_10_trending_cves_15092025 · Reddit Post
• https://t.me/cvetracker/25984 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1nidccg/top_10_trending_cves_16092025 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1nj90xz/top_10_trending_cves_17092025 · Reddit Post
• https://twitter.com/CVEnew/status/1932584556386779292 · Twitter Post
• https://twitter.com/anylink20240604/status/1967191418130313535 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1932684358827065779 · Twitter Post